Skip site navigation (1)Skip section navigation (2)
Date:      Sun, 18 Sep 2005 20:16:57 +0100 (BST)
From:      Gavin Atkinson <gavin.atkinson@ury.york.ac.uk>
To:        Giorgos Keramidas <keramida@freebsd.org>
Cc:        cvs-src@freebsd.org, src-committers@freebsd.org, cvs-all@freebsd.org
Subject:   Re: cvs commit: src/share/man/man5 passwd.5
Message-ID:  <20050918200104.F89636@ury.york.ac.uk>
In-Reply-To: <200509181540.j8IFe2LR042274@repoman.freebsd.org>
References:  <200509181540.j8IFe2LR042274@repoman.freebsd.org>

next in thread | previous in thread | raw e-mail | index | archive | help

[-- Attachment #1 --]
On Sun, 18 Sep 2005, Giorgos Keramidas wrote:

> keramida    2005-09-18 15:40:02 UTC
>
>  Modified files:
>    share/man/man5       passwd.5
>  Log:
>  Explain the use of `*' in master.passwd and that it's slightly
>  different from the use of `*' in /etc/passwd.

+.Nm master.passwd
+file, a password of
+.Ql *
+is used to indicate that no one can ever log into that account.
+The field only contains encrypted passwords, and
+.Ql *
+can never be the result of encrypting a password.

This is not strictly true - all it prevents is logins using passwords. 
Passwordless logins using SSH public keys (for example) are unaffected.

Perhaps the attached patch chould be committed?

Gavin
[-- Attachment #2 --]
--- passwd.5.old	Sun Sep 18 16:40:02 2005
+++ passwd.5	Sun Sep 18 20:15:16 2005
@@ -110,7 +110,9 @@
 .Nm master.passwd
 file, a password of
 .Ql *
-is used to indicate that no one can ever log into that account.
+is used to indicate that no one can ever log into that account
+using passwords.
+Passwordless logins will not be prevented.
 The field only contains encrypted passwords, and
 .Ql *
 can never be the result of encrypting a password.

Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20050918200104.F89636>